157 lines
3.8 KiB
TypeScript
157 lines
3.8 KiB
TypeScript
import * as dotenv from "dotenv";
|
|
import { cleanEnv, str } from "envalid";
|
|
import { Construct } from "constructs";
|
|
import { App, TerraformStack, LocalBackend } from "cdktf";
|
|
import { HelmProvider } from "@cdktf/provider-helm/lib/provider";
|
|
import { KubernetesProvider } from "@cdktf/provider-kubernetes/lib/provider";
|
|
import { NamespaceV1 } from "@cdktf/provider-kubernetes/lib/namespace-v1";
|
|
|
|
import { GiteaServer } from "./gitea";
|
|
import { OnePassword } from "./1password";
|
|
import { PostgresCluster } from "./postgres";
|
|
import { Longhorn } from "./longhorn";
|
|
import { AuthentikServer } from "./authentik";
|
|
import { ValkeyCluster } from "./valkey";
|
|
import { CertManager } from "./cert-manager";
|
|
import { Nginx } from "./nginx";
|
|
import { Prometheus } from "./prometheus";
|
|
import { MetalLB } from "./metallb";
|
|
import { ExternalDNS } from "./external-dns";
|
|
|
|
dotenv.config();
|
|
|
|
const env = cleanEnv(process.env, {
|
|
R2_ACCESS_KEY_ID: str(),
|
|
R2_SECRET_ACCESS_KEY: str(),
|
|
ACCOUNT_ID: str({ desc: "Cloudflare account id." }),
|
|
BUCKET: str({ desc: "The name of the R2 bucket." }),
|
|
});
|
|
|
|
const r2Endpoint = `https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com`;
|
|
|
|
class Homelab extends TerraformStack {
|
|
constructor(scope: Construct, id: string) {
|
|
super(scope, id);
|
|
|
|
const kubernetes = new KubernetesProvider(this, "kubernetes", {
|
|
configPath: "~/.kube/config",
|
|
});
|
|
|
|
const helm = new HelmProvider(this, "helm", {
|
|
kubernetes: {
|
|
configPath: "~/.kube/config",
|
|
},
|
|
});
|
|
|
|
const namespace = "homelab";
|
|
|
|
new NamespaceV1(this, "namespace", {
|
|
provider: kubernetes,
|
|
metadata: {
|
|
name: namespace,
|
|
},
|
|
});
|
|
|
|
new Longhorn(this, "longhorn", {
|
|
name: "longhorn",
|
|
providers: {
|
|
kubernetes,
|
|
helm,
|
|
},
|
|
});
|
|
|
|
new MetalLB(this, "metallb", {
|
|
provider: helm,
|
|
name: "metallb",
|
|
namespace: "metallb-system",
|
|
});
|
|
|
|
new OnePassword(this, "one-password", {
|
|
provider: kubernetes,
|
|
namespace,
|
|
});
|
|
|
|
const nginx = new Nginx(this, "nginx", {
|
|
provider: helm,
|
|
namespace,
|
|
name: "nginx-ingress",
|
|
});
|
|
|
|
const certManagerApiVersion = "cert-manager.io/v1";
|
|
|
|
const cm = new CertManager(this, "cert-manager", {
|
|
certManagerApiVersion,
|
|
name: "cert-manager",
|
|
namespace,
|
|
version: "1.18.2",
|
|
providers: {
|
|
kubernetes,
|
|
helm,
|
|
},
|
|
});
|
|
|
|
const externalDNS = new ExternalDNS(this, "external-dns", {
|
|
namespace,
|
|
provider: helm,
|
|
name: "external-dns",
|
|
});
|
|
|
|
externalDNS.node.addDependency(nginx);
|
|
externalDNS.node.addDependency(cm);
|
|
|
|
new Prometheus(this, "prometheus", {
|
|
provider: helm,
|
|
namespace,
|
|
name: "prometheus-operator",
|
|
version: "75.10.0",
|
|
});
|
|
|
|
const pg = new PostgresCluster(this, "postgres-cluster", {
|
|
certManagerApiVersion,
|
|
name: "postgres-cluster",
|
|
namespace,
|
|
providers: {
|
|
kubernetes,
|
|
helm,
|
|
},
|
|
users: ["shahab", "budget-tracker", "authentik", "gitea"],
|
|
primaryUser: "shahab",
|
|
initSecretName: "postgres-password",
|
|
backupR2EndpointURL: r2Endpoint,
|
|
});
|
|
|
|
const valkey = new ValkeyCluster(this, "valkey-cluster", {
|
|
provider: kubernetes,
|
|
namespace,
|
|
name: "valkey",
|
|
});
|
|
|
|
const authentik = new AuthentikServer(this, "authentik-server", {
|
|
provider: helm,
|
|
name: "authentik",
|
|
namespace,
|
|
});
|
|
|
|
authentik.node.addDependency(pg);
|
|
authentik.node.addDependency(valkey);
|
|
|
|
const gitea = new GiteaServer(this, "gitea-server", {
|
|
name: "gitea",
|
|
namespace,
|
|
provider: helm,
|
|
});
|
|
|
|
gitea.node.addDependency(authentik);
|
|
}
|
|
}
|
|
|
|
const app = new App();
|
|
const stack = new Homelab(app, "homelab");
|
|
|
|
new LocalBackend(stack, {
|
|
path: "terraform.tfstate",
|
|
workspaceDir: ".",
|
|
});
|
|
|
|
app.synth();
|